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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with otrikothrough . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please CANCEL claims 7-11 and AMEND claims 1-8 and 12 in accordance with the 
following: 

1. (currently amended) A failure detecting apparatus for detecting network failures, 
based on information obtained from a-monitor target equipment which Is disposed within a 
communication network and which has a plurality of communication interfaces, comprising: 

a storage device storing traffic flow information indicating both an amount of receiving 
traffic and an amount of transmitting traffic in each interface of the monitor target equipment; 

a computation device computing an amount of abnormal traffic king a virtual point set in 
thg monitor target eouipmant as at least qh r of a start ooint and an end point, of-among_a 
plurality of segments of traffic inside the monitor target equipment using the traffic flow 
information, and outputting an obtained flow as the amount of abnormal traffic; and 

determination device determining whether there is a network failure, using the amount of 
abnormal traffic, thereby outputting a determined result. 

2. (currently amended) A computer-readable storage medium efH/dMel v e ncoded wjth a 
computer p rogram frr eflabtiftg thatwhgn ^nted causes a computer to execute a method that 
detects network failures, based on information obtained from a-monitor target equipment which 
is disposed within a communication network and which has a plurality of communication 
interfaces, said program methgd_comprising: 

extracting traffic flow information indicating both an amount of receiving traffic and an 
amount of transmitting traffic in each interface of the monitor target equipment, from a storage 

device of the computer; 

computing an amount of abnormal ^ffir ..sin g a virtual ooint set in the monitor target 
*nui pmsnt as at jeast nr.* nf a star tinn nnint and an end. ^among_a plurality of segments of 
traffic inside the monitor target equipment, using the traffic flow information; and 

determining whether there is a network failure, using the eeteme4-amount of the 
abnormal traffic. 
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3. (currently amended) The computer-readable storage medium according to claim 2, 
wherein said pfeffem nnnhifc thn rnmpntnrto cQmpute -computina incl udes computing at least 
one of ar na first amount of traffic of data generated by and outputted from the monitor target 
equipment, aa -a second amount of traffic of data discarded by the monitor target equipment and 
afl -a third amount of traffic of data transmitted to and from tho samo asjng]eJnterface- aftor boing 
rocoivod, of an interface of the monitor target equipment, as the amount of abnormal traffic. 

4. (currently amended) The computer-readable storage medium according to claim 2, 
wherein said Bfo f fa ffi " n ^ i r . * thn tinmpirtnrto compute computing inclu d es computing a ratio of 
the amount of abnormal traffic to a total amount of thejraffic inside the monitor target equipment, 
and to determine that there is a network failure if the ratio of the amount of abnormal traffic 
exceeds a predetermined threshold value. 

5. (currently amended) The computer-readable storage medium according to claim 2, 
wherein said pfogfaffl "nnhino fhn rnmpntnrto provido method further comprises setting 

a virtual point indicating aft-the end or a-the starting point of thetraffic inside the monitor target 
equipment, and to oomputo an omount of 

wherein said computing computes a f irst traffic flow using each interface and anth e r 
another interface as a starting point and an end, respectively, of the traffic inside the monitor 
target equipment, a flow rato of second traffic flow u sing each interface and the virtual point as e 
thestarting point and aa-the end, respectively, an amount of g jhird traffic fjgw_using the virtual 
point and each interface as a-the starting point and afl-the_end, respectively, and an amount of a 
fourth traffic flow using each interface and tho samo i ntorfooo as a- both the starting point and a* 
the end, rospootivoly. and te-computes a first total of tho roopoctivo amounts of the second, third 
and fourth traffic flows as the amount of abnormal traffic. 

6. (currently amended) The computer-readable storage medium according to claim 5, 
wherem said program enables the nnmputorto oomputo computing i n cludes computing a 

ratio of the amount of abnormal traffic to a second total of - tho roopoctivo amounts -of the first, 
second, third and fourth traffic flows , and to 

wherein said determining determines that thoro is a t he network failure exists if the ratio 
of the amount of abnormal traffic exceeds a predetermined threshold value. 
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Claims 7-11 (cancelled) 

12. (currently amended) A failure detecting apparatus for detecting network failures, 
based on information obtained from monitor target equipment which is disposed within a 
communication network and which has a plurality of communication interfaces, comprising: 

storage means for storing traffic flow information indicating both an amount of receiving 
traffic and an amount of transmitting traffic in each interface of the monitor target equipment; 

computation means for computing an amount of abnormal traffic using a virtual point set 
in the monitor target nniitamant as at least one of a start p oint and an end point, ef-among.a 
plurality of segments of traffic inside the monitor target equipment using the traffic flow fate 
information, and outputting the-an_obtained flow as the amount of abnormal traffic; and 

determination means for determining whether there is a network failure, using the 
amount of abnormal traffic, thereby outputting a determined result. 
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